ruflo v3.38.0

v3.38.0 — Init scaffold content drift remediation (ADR-382)

An investigation into ruflo's two install tracks (npm install vs. the Claude Code marketplace plugin) surfaced four independently-verified defects in the init scaffold and its own remediation tooling, documented in ADR-382 and tracked in #2971. All four are fixed in this release.

Fixed

• Unfulfilled ADR-128 migrate mitigation (#2973): ADR-128 Phase 2 removed 9 forked agent files (coder.md, researcher.md, reviewer.md, tester.md, memory-specialist.md, security-auditor.md, sparc-orchestrator.md, goal-planner.md, adr-architect.md) from the init template, making each plugin canonical — but the promised ruflo migrate detection for that removal was never implemented. ruflo migrate status now detects the gap and prints the exact ruflo plugins install <plugin> command to restore each missing agent.
• Unpinned marketplace-plugin MCP launch (#2975): plugins/ruflo-core/.mcp.json always launched npx -y @claude-flow/cli@latest, silently overriding any local npm install a user had, causing version divergence between the two install tracks. It now resolves a local install first (mirroring hook-handler.cjs's existing resolveCliBinForHook() pattern), falling back to npx @latest only when nothing local resolves.
• 3 plugins missing from the marketplace registry (#2975): ruflo-agntcy, ruflo-bbs-federation, and ruflo-business-pods existed in plugins/ but were absent from .claude-plugin/marketplace.json, making them uninstallable via the marketplace despite being fully built. Registered.
• Dead CLI/tool references in bundled scaffold content (#2974): 701 occurrences of the stale npx claude-flow invocation form were remapped to npx @claude-flow/cli@latest across 142 files. A new CI guard (scripts/smoke-init-scaffold-references.mjs, warn-only) now derives live MCP-tool and CLI-subcommand sets and flags any future drift; 410 dead MCP-tool-name references (e.g. sparc_mode, task_orchestrate, memory_usage) were deliberately left FLAGged rather than guessed at, and are tracked as follow-up work rather than silently dropped.

Notes

• No breaking changes; this is a backward-compatible bug-fix and tooling release.
• The plugins/ruflo-core MCP-launch fix applies to the git-based marketplace-plugin install track directly (already effective on main); the migrate.ts detection and scaffold-content remap ship in this npm release.